Exploit for Path Traversal in Microsoft

PoC exploit for CVE-2025-47176, a Microsoft Outlook Remote Code...

Microsoft Outlook - Remote Code Execution (RCE)

Titles: Microsoft Outlook - Remote Code Execution RCE Author: nu11secur1ty Date: 07/06/2025 Vendor: Microsoft Software: https://www.microsoft.com/en-us/microsoft-365/outlook/log-in Reference: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47176...

Security Updates for Outlook (June 2025)

The Microsoft Outlook application installed on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

CVE-2025-47176

A Remote Code Execution (RCE) vulnerability exists in Microsoft Outlook due to incorrect path name restrictions in the restricted access catalog. An authorized attacker can exploit this by providing a crafted mail item containing a malicious sync path (e.g., .../...//), which triggers the executi...

CVE-2025-47176 Microsoft Outlook Remote Code Execution Vulnerability

...

CVE-2025-47176

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-10 17:32:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17944 2025-06-12 04:23:13+00:00| seen|...